Malware Detection on MB-24+ PGD ε=2/255
1.2ASRDART (adv)
Evaluation Results
| Method | Links | |
|---|---|---|
| DART (adv)Training Perturbation Budget (ε)=8/255, Cost (h)=0.90±0.022026.04 | 1.2 | |
| DART (kl)Training Perturbation Budget (ε)=8/255, Cost (h)=1.08±0.022026.04 | 1.6 | |
| DART (adv)Training Perturbation Budget (ε)=2/255, Cost (h)=0.90±0.022026.04 | 3.2 | |
| DART (kl)Training Perturbation Budget (ε)=2/255, Cost (h)=1.08±0.022026.04 | 3.7 | |
| DART (clean)Training Perturbation Budget (ε)=8/255, Cost (h)=0.71±0.022026.04 | 19 | |
| DART (clean)Training Perturbation Budget (ε)=2/255, Cost (h)=0.71±0.022026.04 | 28.6 | |
| AdvDA (no defense)Cost (h)=0.24±0.012026.04 | 100 | |
| MalGuise (clean)Cost (h)=0.76±0.022026.04 | 100 | |
| MalGuise (adv)Cost (h)=18.40±1.962026.04 | 100 |